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. CHiPTAMALTfTIC onnreEa AT afx/nsn 


■ Since about 1930, oryptanalytio ooutbsb hove , been 
hew at Chi for 6-monthly periods over the Winter. Eaah new 
nBEoer of the staff bad to take pert in two oonseoutive oouraes. 
in the first 6-monthly Winter period, the fundamental systems of 
substitution methods were dealt with, that is to say substitutions 
(sla$la, multiple, variable unit ((weohaelstelliger)), ayllabio). 
substitution systems (periodic and aperiodio), bigrem • 
substitution ((paaroaesaren)) aM oode-b ooka . 

In the second 6-monthly Winter period, the baBic 
trampoaition systems were first dealt with (local transposition 
((umstellung)), staple transposition, transposition.with 
diagonals, oocab transposition and stencils) and then the 
prittolpal re typhoid.ng methods (combinations of basic ays terns, 
further substitution, subtracters and' dunny recypheimnts, . 

((Blender usbersohluesaelung)) ), ‘ 

The different enoypharsd texts were worked on alongside 
practice-examples based, oh German -p/L texts. 

Two periods of instruction, eaah lasting two hours ware 
held each week, so that in one half-year there would be about 
50 two-hour periods. The number of participants varied 
considerably from one 6-monthly period to another. Seme 
oouraes were attended 1 by 3, others by as many as 12 persons and 
more. In the first years, Min.Eat,FENNER directed all the oouraes ‘ 
personally; later, FENNER ana Dr. ifiaffiUND divided this work 
between them,' During the war these beginners 1 oouraes were 
held by Dr. WENDLAND and Dr.' HOETTENHAIN. 

Only the newly engaged staff of the sections de ali ng ■ 
with the various countries took port in these Oouraes, Members 
of the oryptanalytio seotlon, .as soon as they joined, were 
immediately instructed at Chi for 2 to 4 months of their 
service period in fundamental and re cyphering systems, so that 
after that period had elapsed they would be in a position 
to taokla unsolved problems on their own. 

in the stumer cf 1943, a oouroe of odvanoed study wna 
instituted-for the first tick. 8 capable decipherers, who had 

shown some oryptanalytio ability, were detached from the seotions 
dealing with the various countries' and joined this course. 

Three 2-hour periods took place each, week, in 3 uimer and Winter. 

Tha duration of the oourse was not find at the; outsat. As a 
result of the general situation, no more instruction was given 
after November 1944. Dr. HJETTENfUIN was in charge of the oourse. 

The breaking of recyphennents wes worked at exclusively. 

At first, the mathematical bases ((of cryptanalysis)) ware worked 
through, for example, permutations, the theory of probabilities, 
elementary statistics. Then thn relevant oryptanalytio problems 
were treated} solving of oocipromised text., investigation of 
IndioatDr-groups, subtracter problems cf general and 
particular application, epeoial solving of doJile-trupapositions . 
ato. Machine cyphers were also to have been dealt with in 
oourse. To conclude these theoretical studios, problems wore examined. 
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rtiioh had cotually occurred and then, when possible* the study ' 
.of these was carried still further. Those taking part in the 
course were fmilarised with the working of HOLLERITH machines 
ana neohanioal aids to oryptanalysis. A study was also made of 
the methods of breaking our own cyphers discovered by the cypher 
security people. In brief, this course was intended 
as instruction in oryptanalysis as it stood at the time. 

Translator! J.W.E. 


(CSDIC) ■ 
28 / 8 / 45 . 


Crypto Office in Austria 


Orffcil the Anaahlass there was a cryptographic offioe in 
Vienna which collaborated closely V7ith the Chancellory 
Office of the Bund and deciphered diplomatic messages. The 
head of this office was Hofrat Dr. SEIFERT. Toe staff was snail. 
IS ~^> Houmania, Greece, Jugoslavia, Bulgaria, Turkey, Poland 
u ^2 C8eollosloTafci ' a . 1,01,41 countries dealt with. This 

office has worked in close contact with "chi" ((i.e. OCT/Chi )) 
for many years. We do not know, however, in detail what thi s 
collaboration amounted to. 

During tension between the two countries, fchs 
collaboration between the two "Chi" offices was maintained, When 
the Anadhluss was effected. General FEUJGIEHEI, and Kin. Rat. FENNER 
5®®* ^ ersottnB l t0 Berlin. The following joined 
"Chi": Hofrat Dr. SEIFEST who was a Min. Rat. in Berlin. 

Dr. 1MJLER ana Reg. Rat Dr. .LOCKER. Herr BAIL0VIC cams to the 
Forsehungsamtj he oily stayed a short tine;with FA and was then 
taken over by the Amy (m. 7 ) .and for the last 4 months was 
05® at Chi, 

At Chi the above named were given the following tasks:- 

Dr. Seifert was specialist on known codes and broke.Polish. 

Turkist, Greek and Vatican basic books. 


Dr. MADDER was deputy head of the- Italian Seotion. 
Dr, LOOKER was head of the Turkish Section. 

GHR HATL OTT'i worked on Belkan Codes and cyphers. 
Translator. W.G.Q. . 
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Speech da-scrambling apparatus at LUDglGSFFTPE 

There was an intercept apparatus at Ludwigsfelde by which 
"enqrpherea" conversations between London anS Washington Were 
picked up in deciphered form. The principle of the enciphering is 
unknown to us now.- At any rate it was such a simple matter that when 
using a new key, .this new key could be found in a few minutes.- 
It was only necessary to turn a few knobs until the speech 
becane intelligible again. 

i 

. The equipment was constructed- in accordance with information 
Trcm ffa Pruef 7 and in such a way that it could still have been 
used if the key had been extended but preserving the basic 
principle. ■ We do not knew if there was a second apparatus 
at another station.In Germany of this or similar type. No 
secret conversations were allowed on the London-Waahington 
line. If the subscribers ignored this regulation they were told 
about it through a "speaker". If neoessary, the conversation 


Translator: W.c.o. 


MUSTANG Speech.Enojmherment 

In the Spring at 1945,. a speech enoyphenaent apparatus, 
recovered intact from a MUSTANG fighter, was submitted by' the 
G.A.F. to certain members of the 3 branches of the Armed Forces 
and QKW/Chi at ADLEB3H0RST near BERLIN.' The decision was taken on 
that occasion to hand the set over to ffa pruef 7, for more 
detailed examination. The intention was to aisoever the 
degree of security provided by the set, and, if possible, to 
construct a set which would enable us to listen in to the traffic. 

The investigations into the security, which were 
conducted mainly by Dr. BUGGISUH and Dr. LOTZE, were inconslusive, 

- Only the following-points were established: 

1) The TIGESSTEDT cypher principle is used; there are 9 
subscribers (spreohkoepfe). 

2) The nuniber of possible key settings is so great that the 
systematic examination of all keys would probably not lead to 
a solution. 

3) . It is always possible to reconstruct the key-setting from an 

intercepted ((aufgenonmenen)) oscillogram.. It is doubtful, 

. however, whether the solution can -jb reached in a short enough 

time for exploitation during the actual fighter- operation- concerned 

Translator: J.M.E . 
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■ Cypher Machine M : 40 

Cyp her machine J£ 4C was designed and constructed by 
Ob. insp; KENZER over the period'I 937 -I 939 . After the designs 
had been completed, ?/a pruef had 30 maohines built by the firm 
of Wanderer in Chemnitz, Hcwever,. as far as. we know, they 
were never used. Exact information on all'details cannot be 
given, as some points have slipped our memory. . For this reason, 
all figures given in this report are to be accepted with reserve. 



&A [Tkge^lazgprdjxbmioouhanywt- [ 


These bars were, numbered 1 to Z(, and Bl , B2 and-B3,. On bars 1 to 26 
the letters of the alphabet were cylioally arranged, in .alphabetical 
order. Bars Bl to B3, the Bo-oallsd "dunny strips" ((Blenderstreifen).), 
bore small circles at 8 or 9 different points. All the metai bars 
bpt one were covered up by the maohine lid. Under the window in the lid 
((through which one of the bora marked with an alphabet appeared)) the 
t cypher alphabet GA was inscribed. The clear letter was looked up on the metal 
bar which happened to be visible at the time; and' substituted by the cypher 
letter ,occurring below .it ((on the lid)), Depypherment was effected 
by the reverse process. The drum with the bars turned on its own 
axis and was made. to.move by the depression of a key. FOr each 
depression of the key the arum gave 1, 2, 3 or 4 kicks. The 
movement of the drum was controlled by the 3 pin-wheels A, B and c. 

These pin-wheels were.fitted with variable pins and had periods of 
. 23 , 21 and 25 . If none of the. pins on the pin-wheels was in the 

"effective" position, then the drum gave orie kick,* if dne of 

the pins on any of the wheels was "effective! 1 , the drum gave twq 
kicks; for two "effective" pins, three kicks; for three'"effective® 
pins four kloks. If a dummy bar appeared in the window on the lid, 
a letter coming below one of the circles on the dummy bar was inserted 
in the text as a dummy. The letter to be enciphered was then enciphered • 
after another depression'of the key. The period of the maohine 
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23 * 2V*25 * 29'^4x 1°5. The following could give the 
daily key- 1) Arrangement of the metal bers on the drum if. 

2) pin-setting of the three wheels A, B and c. ' 3) Cypher 

h.^' was '■he setting for the message keyt- 

* drum ff * 2 )' initial position of the pin- . 
wheels A, B and C. The following remarks may be'made on the 
security of oypher-machine H 40:- As the machine was sever used 
we have .no results of recent examination of its security to ' 

provide. Results obtained in 1939 were as follows!- 

1) Owing to the restricted number of alphabets used, io messages 
on the same setting are sufficient to solve and reconstruct 

* the usaohine. , 

2) A direot crib does not enable one to reconstruct the machine 
as, cwing to the dummies, it is not possible to line up the 
clear text with the cypher text accurately enough, 

3) An isolated cypher message oannot be broken,. 

4) Neither stereotype beginnings and endings, nor parallel 
pieces of text are compromising. ' 

. I 11118 * fr ° Q results obtained at the time, it would appear that 

whv ^A"** 1 "*’** degree of security. He do not know 

why it was not introduced. Cypher machine },; 40 went through 

several stages of development .before it took on its definitive 

? ri S inal lT the a rum remained stationary at every depression 
of the ,ksy, or gave one kiok. Dummies were not intended at 
rirst, For a time the aiaohine was fitted with an automatic 
morse transmitter. There was a key under eaph letter in the 
cypher alphabet, if this key were pressed, it caused this 

* thia °^ hor l9tter ^ operating a sliding 
contact whioh brushed past morse-signals let in flush ((with 
the surface along which the sliding contact brushed)). Vfe dropped 

transmission as it was too diffioult to keep to 
rive-letter groups. e 


Translator: M.P.F. 
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Solution of J apanese Diplomatic Messages 


In the section dealing with JAPAN (Head of Section 
Obit. Dr. ADLER), a few straightforward codes and simple 
reqyphering systems were worked on and partly solved/ Details 
of these operations are unknown.to us. 

Prof. Dr, FRANZ' s orypt analytio section worked on the 
iollcwxng Japanese recyphering systems: 


1) KOKOK massages; Messages with KOKOK, GAGAG etc., as indicator-, 
groups produced numerous split-repeats, especially at the 
beginning of messages. Ab the relation between the number 

of vowels and the number of oonsonapts was fairly exaotly 50 : 50 
it was suspected that a 2-letter vdwel-oonsonant or oonaonant- 
vowel code was used. About, 20 KOKOK' messages were then written 
down one beneath the other, and the ooluans containing the minimum 
t number of devaitiona, among adjacent bigraas, from the vowel- . 
consonant or oorisonant-vowel form,' wert aligned together. 

This gave a transposition length of 19. This transposition 
was the same for till indioctor-groupB and remained bo for 
months at a time'. ■ 

2) So-called "Indioator-group messages" (J151 . 

Right at the start of our investigations, 2 Mssages on' 
the PARIS-TQKIO link ware discovered, of which the second 
, . was a repeat of the first, with slight differences. We .were 
able to solve this pair of messages;' the solution was 
facilitated by the fact that the basic code - the so-called 
LA oode - was known, X e was a 2-letter code recyphered by . 
transposition; in the transposition cages, the first ten rows 
also contained blanks. The other messages with the sane 
indicator supplied the basis of the actual code underlying 
these indicator-groups. With the knowledge of this basis, 
other indicator-groups could then.be worked on successfully. 

On an average, 3 new indioator-groups appeared every day. 

The stencils remained in foraa for 10 days on an average. 

When the basio code happened to ohange, the new code was 
diBoovered by compromises that occurred. 

.iftsr a year had gone by, the same indicator-groups recurred. 
Transposition systems and stencils were simply derived from 
those used in the previous year. 


For the solution of thess messages, the bigran apparatus 
■ was successfully introduced at Chi.- 


3) "XAIGUN" and "RIKQGUN 11 . 

Two attempts were, made to solve the Japanese attache 
messages, but both were .unsuccessful. As far as I can remember, 
nothing was discovered which might serve as a basis for a ' 
break-in. 

k) Japanese machine 

A few years ago, the German Foreign office broke the. 

. Japanese machine messages, and constructed a machine of 
Identical function to .the Japanese ope. Whan it was no longer 

/possible 
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to rood the_traffio, raring to alterations in the naohine 
or to a different method of use, work on these. !.iessage B 
was discontinued. In-Novenfcer, I 944 , wqrk was resumed 
by Baurat STEINBERG, but oould not be concluded. it 
emerged however, that the reoypherment principle had 
remained the sane. 


5) , Indi e 


All,I can reoall of the work on, and solution of, 
„^? Sa f e ? w 5 ° se indioator-groups were generally «BEVA 2 " or 
, CI F Q i'.j. 1 ?. thSt ths ayatem consisted of reoynherosat, W 
substitution tables, of a basio code which aiso oontained 
ores in F/L. The contents of the messages were of a 
oommeroir.l nature. 


Translator} J.M.E. 


The Solution of Polish Attaohg Meaaagea 

work nn Mitt !t/ 0 S\ ag 2i, When th8 “^analytic section took over 
work on Polish Att&oM traffic, the subtraotor used for 

wa f f ead ^ a figure-table horizontally and vertically. 
The table-consisted of 24 lines, each containing 26 5-figure groups. 
In the margin of eaoh table there were 100 different figure- P 
bigrams from 00 to 99 in hatted order.' Before eaoh new line ■ 
or column the appropriate margin-bigraa from the table was Inserted 

! aXt aa atl indicator. As the encipherers usually rsaa 
off the subtraotor horizontally and Vertically, in a serpentine 
raBhion, the shape of the table oould bo Reconstructed actually 
before the recovery of the book groups. _ In this -way the whole, 

“.*?? enpyphered material oould be lined up together.in depth 
ana the re cyphering groups "stripped" without any difficulty. 

We thus succeeded in reconstructing the code on a relative 
oasis. The oode showed a great number of groups of high 
frequency, and was thus particularly well suited for breaking the 
recypherment on a very small depth. - After a series of tables 
had been reconstructed in this Tray, this method of solution 
suddenly failed us. Neither did the known series of indicators 
appear any more. We presumed that the subtraotor was now , 

read off the table in another way. As we had &ot the book and many 
indioators occurred so frequently that were able to break CBSsagea 
reqfphered on the same key, a 'study of the solved pieces of subtraotor 

for exac^ie, shewed that the relative figure obtained for the 12th 

book-group after one indicator was identical with the relative 
figure obtained for the 7 th book-group, after another indioator. 

Prom this it was concluded that the supposed atenpil had lain 

au ° h a position with both, indioators that, in the first case, the 
l?th hole had lain in the positionon the table where the 7 th group 
lay in the second ease. The indioator and'the oheok-group indicated 
the oo-ordinates of the top left-hand and bottom right-hand 
corners. If, with two different indioators., the stenoil was 
moved only one digit to the right, then three digits of eaoh 
relative figure for the second indioator were already obtained- 
from the relative figure for the first indioator. Thus, by 

/tedious 
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tedious and close work, stenoil, table and margin-bi-grans • ' 

were reoonstruotea. This worlc had to be carried out. afresh for 
new stencil, as the stencils, were independent of each 
other, fi'hen the first stencil was solved, we were also 
Qble .J° f®? triot the relative basis of the basic bode to 10 
possibilities; We used Hollerith naohines to help us. All 
the notarial belonging to one stenoil.and reoypharing table 
was registered on Hollerith cards, i.e. against every message 
group its appropriate indicator■and Its position in the 
text were noted. 

: I can no longer remember details of the process of solution 

or oharaoteriaitics of the clear and cypher texts and oypher 
conventions. ■ in any case it would never have been possible to 
IS?. 1 BU J“"® utlkl iown quantities;- book, stenoil and recyphering 
table - with the stall amount of material on each key. with ' 
a knowledge of the code - and, at that, a code with vary marked 
frequency peaks - there was latterly sufficient traffic to 
reconstruct table and stencil. If the windows had been made of 
various sizes in one stencil, it would not have been possible 
to solve the stencil - even with a known book. 

- . By SVsbruary, I 945 , roughly 12 different stencils and a large 

number of tables had been solved. As for as we knew, the book 
remained the same all the time. 


Translator: tt.G-.F. 



